CVE-2023-42943

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14. An app may be able to read sensitive location information...

CVE-2023-42943

CVE-2023-42943 affects macOS Sonoma 14 and relates to a privacy issue where private location data could be read from log entries. The underlying cause is improved redaction of sensitive location information in logs. The vulnerability is classified with a Local attack vector and Low attack complex...

CVE-2023-42943

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14. An app may be able to read sensitive location information...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability previously existed in Apple macOS Sonoma version 14, which stemmed from an application that may be able to read sensitive location information...

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS prior to version 17.6 and iPadOS prior to version 17.6, which stems from an...

Italtel i-MCS NFV 安全漏洞

Italtel i-MCS NFV is an IMS/NGN core and border suite from Italtel Italy. A security vulnerability exists in Italtel i-MCS NFV version 12.1.0-20211215, which originates from a remote, unauthenticated attacker being able to upload a file at an arbitrary path...

Apple watchOS 安全漏洞

Apple watchOS is a set of smartwatch operating systems from the American company Apple Apple. A security vulnerability exists in versions prior to Apple watchOS 10, which stems from an application that may be able to read sensitive location information...

express: cause malformed URLs to be evaluated

A flaw was found in the Express.js minimalist web framework for node. Upstream versions of Express.js before 4.19.0 and all pre-release alpha and beta versions of 5.0 are affected by an open redirect vulnerability using malformed URLs. When a user of Express performs a redirect using a...

CVE-2024-40644 gitoxide's gix-path can use a fake program files location

gitoxide An idiomatic, lean, fast & safe pure Rust implementation of Git. gix-path can be tricked into running another git.exe placed in an untrusted location by a limited user account on Windows systems. Windows permits limited user accounts without administrative privileges to create new...

FetLife: Able to see location coordinates in any event without permission to do so

The vulnerability allowed attackers to view the location coordinates of events in the response of the /events/event-id endpoint, even when the event host had hidden the exact address from non-RSVP users. This was possible because the coordinates were included in the response regardless of the...

RUSTSEC-2024-0355 gix-path can use a fake program files location

Summary When looking for Git for Windows so it can run it to report its paths, gix-path can be tricked into running another git.exe placed in an untrusted location by a limited user account. Details Windows permits limited user accounts without administrative privileges to create new directories ...

Family Location Tracker App Life360 Breach: 443,000 Users’ Data Leaked

Life360, a popular family location tracker app, suffered a data breach affecting 443,000 users. Personal details, including first…...

Path Traversal

@jmondi/url-to-png is vulnerable to Path Traversal. The vulnerability is due to the lack of proper sanitization or validation of the ImageId input within extractqueryparams.ts, which allows an attacker to store an image in an arbitrary location that the server has permission to access...

CVE-2024-39918 Path Traveral in @jmondi/url-to-png

@jmondi/url-to-png is an open source URL to PNG utility featuring parallel rendering using Playwright for screenshots and with storage caching via Local, S3, or CouchDB. Input of the ImageId in the code is not sanitized and may lead to path traversal. This allows an attacker to store an image in ...

How to Successfully Test Citrix StoreFront Beacons Inside a Remote Desktop Session

This article describes how to successfully test the Citrix StoreFront Beacons functionality with Citrix Receiver 3.1 Standard or later when connecting to workstations using a Remote Desktop session RDP. By default, a configured Citrix Receiver 3.1 Standard or later with Beacons and stores always...

How to Set Up Syslog to Capture Logs Real Time on a Central Location

This article describes how set up a Syslog server when you are experiencing issues across multiple XenServers and need to capture logs real-time on a central location...

CVE-2024-32670

The CVE-2024-32670 entry relates to Samsung Galaxy SmartTag2 prior to version 0.20.04. The root cause is exposure of sensitive information via BLE advertising, which can allow an attacker to potentially identify the tag’s location. Affected product: Samsung Galaxy SmartTag2; affected component/fu...

PT-2024-24755 · Samsung · Samsung Galaxy Smarttag2

Name of the Vulnerable Software and Affected Versions: Samsung Galaxy SmartTag2 versions prior to 0.20.04 Description: The issue allows attackers to potentially identify the tag's location by scanning the BLE advertising, exposing sensitive information to unauthorized actors. Recommendations: For...

SAMSUNG Galaxy SmartTag2 Security Vulnerability

SAMSUNG Galaxy SmartTag2 is a smart loss prevention device from Samsung South Korea. It can be located by Bluetooth. A security vulnerability exists in SAMSUNG Galaxy SmartTag2 versions prior to 0.20.04, which stems from the exposure of sensitive information to an unauthorized actor, which could...

Boston Business Journal Names Rapid7 as a Best Place to Work in Boston

On June 13th, 2024, Rapid7 was recognized by The Boston Business Journal as a Best Place to Work in Boston. This marks the 13th consecutive year Rapid7 has made the list, this time coming in at 8 in the extra large company category. Best Places to Work rankings are based on anonymous employee...